Static task
static1
Behavioral task
behavioral1
Sample
0983beeccc6309db103ecbb847fe2e45_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
0983beeccc6309db103ecbb847fe2e45_JaffaCakes118.exe
Resource
win10v2004-20240802-en
General
-
Target
0983beeccc6309db103ecbb847fe2e45_JaffaCakes118
-
Size
105KB
-
MD5
0983beeccc6309db103ecbb847fe2e45
-
SHA1
35a5761fe7457a97e98135d5db8e03d5fc501bcb
-
SHA256
7f2025fbf640ee88b502ba63a0e20ba449bb1d8ced41f617a864fb8d70cedbd7
-
SHA512
9c457460dbcaeb26bc1b75ce88b14170afd27705946a5c9fed2020959a5cddde8ce0a910e213ba65e866b0da7f55b83e130113906b5d3589405ac768165bece9
-
SSDEEP
3072:AyRaxIjWKZbkSifKTf88R+SAUdjSjsAOR8e:5JjWK6SBTf88R+M+nO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0983beeccc6309db103ecbb847fe2e45_JaffaCakes118
Files
-
0983beeccc6309db103ecbb847fe2e45_JaffaCakes118.exe windows:2 windows x86 arch:x86
b68074c1743d6b8e4454456152545a09
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
kernel32
TransactNamedPipe
ReadFile
SetFirmwareEnvironmentVariableA
CompareStringA
lstrcpyA
VirtualAlloc
VirtualFree
CloseHandle
lstrlenA
CreateWaitableTimerA
DosDateTimeToFileTime
lstrcmpiA
WriteFileEx
ReadFileEx
SetFilePointer
GetSystemTimes
GetEnvironmentStringsA
InterlockedIncrement
GetSystemTimeAdjustment
InterlockedDecrement
FreeEnvironmentStringsA
InterlockedCompareExchange
GetFileAttributesA
WaitNamedPipeA
GetHandleInformation
CreateFileA
WriteFile
ExpandEnvironmentStringsA
ConnectNamedPipe
SetFilePointerEx
GetSystemTime
PeekNamedPipe
cryptui
CryptUIWizFreeDigitalSignContext
CryptUIDlgViewCRLA
CryptUIWizSubmitCertRequestNoDS
CryptUIStartCertMgr
EnrollmentCOMObjectFactory_getInstance
DllRegisterServer
CryptUIDlgViewCertificatePropertiesA
user32
GetDlgCtrlID
SetWindowPos
GetWindowTextA
RegisterClassExA
GetSysColorBrush
SetCursor
LoadIconA
DialogBoxParamA
CreateDialogParamA
SetMenu
SetDlgItemTextA
ShowWindow
LoadMenuA
GetMessageA
UpdateWindow
MessageBeep
OffsetRect
DispatchMessageA
MapWindowPoints
GetSubMenu
DestroyWindow
TranslateMessage
SendMessageA
DefWindowProcA
CreateWindowExA
GetClientRect
advpack
GetVersionFromFile
DoInfInstall
AdvInstallFile
LaunchINFSectionEx
ExecuteCab
OpenINFEngine
NeedReboot
DelNode
RunSetupCommand
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 675B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 67KB - Virtual size: 68KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
htpmxlq Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
zztyfwl Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE